diff options
| author | Chandrashekar Devegowda <chandrashekar.devegowda@intel.com> | 2026-09-22 12:10:20 +0530 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-09-23 09:28:19 -0400 |
| commit | 40eb4b18ad167b63644c27fa67a7400ba050379a (patch) | |
| tree | fdde42e3e32a8e55fb71f56b1048f6a587362a14 /tools/perf/scripts/python/bin/stackcollapse-report | |
| parent | 6d91041bb38b97e2feb625123cc0529d7b83a0e1 (diff) | |
Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
The "Exception info %s" print uses skb->data + 1, but the 12-byte
payload is not guaranteed to be NUL-terminated and can be read past
its end.
Bound the print with "%.*s" and skb->len - 1.
Fixes: 973bb97e5aee ("Bluetooth: btintel: Add generic function for handling hardware errors")
Cc: stable@vger.kernel.org
Signed-off-by: Chandrashekar Devegowda <chandrashekar.devegowda@intel.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-report')
0 files changed, 0 insertions, 0 deletions